Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/34471f-0baf-433b-b86a-acd742fe0986/1/O-XgWvQ8KfMzfm8gFlpAQg2Xmkk.roa
File: O-XgWvQ8KfMzfm8gFlpAQg2Xmkk.roa (raw, json)
Hash identifier: +cSVPrrZGE0RG6ua3kDeP5fHxWhOEOv6pgh3gSfnwNo=
Subject key identifier: 3B:E5:E0:5A:F4:3C:29:F3:33:7E:6F:20:16:5A:40:42:0D:97:9A:49
Certificate issuer: /CN=cfa8e029e5f1e85b1116cb3d33c85a39bb2c94d1
Certificate serial: 019F2368D492913EF3ABE93BFFF98152E024
Authority key identifier: CF:A8:E0:29:E5:F1:E8:5B:11:16:CB:3D:33:C8:5A:39:BB:2C:94:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z6jgKeXx6FsRFss9M8haObsslNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/34471f-0baf-433b-b86a-acd742fe0986/1/O-XgWvQ8KfMzfm8gFlpAQg2Xmkk.roa
Signing time: Thu 02 Jul 2026 15:18:20 +0000
ROA not before: Thu 02 Jul 2026 15:18:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203287
IP address blocks: 95.215.64.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/34471f-0baf-433b-b86a-acd742fe0986/1/z6jgKeXx6FsRFss9M8haObsslNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/34471f-0baf-433b-b86a-acd742fe0986/1/z6jgKeXx6FsRFss9M8haObsslNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/z6jgKeXx6FsRFss9M8haObsslNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:d4:92:91:3e:f3:ab:e9:3b:ff:f9:81:52:e0:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfa8e029e5f1e85b1116cb3d33c85a39bb2c94d1
Validity
Not Before: Jul 2 15:18:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3be5e05af43c29f3337e6f20165a40420d979a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:70:17:06:64:e6:14:b0:92:92:5d:d1:94:03:
df:1c:70:05:9d:2c:4b:a6:62:90:51:f2:dd:16:38:
c9:6d:80:18:8d:53:f3:19:fe:c0:8f:e9:5e:37:bc:
e4:96:7f:85:bd:47:49:c6:b8:cc:63:33:f0:7b:39:
0c:a9:87:ca:8c:dd:04:bc:20:ed:7b:47:0e:13:05:
87:71:d8:f7:74:9a:c2:5a:52:45:e4:dd:01:11:24:
b6:52:25:94:d7:6b:89:6a:1d:d1:6e:aa:4b:8f:22:
3a:35:5c:29:16:c4:01:7f:6f:7f:c3:e3:ee:85:81:
f3:27:cf:ae:30:e4:2f:2e:27:54:93:41:a7:d9:e2:
93:d3:89:32:d5:76:66:b4:58:d9:30:4a:65:33:85:
8c:ab:60:51:75:04:e3:66:a9:17:10:4a:43:48:f5:
a0:41:91:11:fd:69:69:73:7f:63:65:0e:a5:a9:6a:
9c:ca:63:79:26:80:17:97:f5:f8:1b:60:71:f5:3b:
01:41:95:42:d2:7d:db:11:1e:b7:99:b9:8d:4f:52:
06:f3:50:3d:61:c5:f6:21:4f:2f:a4:d0:8b:81:6b:
aa:cd:e6:b7:d0:30:49:ec:41:1c:80:e3:21:71:d6:
42:6a:23:58:52:ba:bc:82:dc:75:2f:30:3a:a3:0b:
aa:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E5:E0:5A:F4:3C:29:F3:33:7E:6F:20:16:5A:40:42:0D:97:9A:49
X509v3 Authority Key Identifier:
keyid:CF:A8:E0:29:E5:F1:E8:5B:11:16:CB:3D:33:C8:5A:39:BB:2C:94:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z6jgKeXx6FsRFss9M8haObsslNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/34471f-0baf-433b-b86a-acd742fe0986/1/O-XgWvQ8KfMzfm8gFlpAQg2Xmkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/34471f-0baf-433b-b86a-acd742fe0986/1/z6jgKeXx6FsRFss9M8haObsslNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.215.64.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:1a:75:d7:8c:49:50:e7:e4:8f:96:f8:0c:76:aa:96:ff:66:
ca:59:20:bc:02:13:f9:d7:1b:9c:64:02:3e:2f:58:c6:48:f3:
e9:41:8f:a6:0d:0d:aa:f6:8c:17:ff:87:c9:fa:e7:91:63:71:
dd:e6:95:35:a7:d3:df:0a:af:15:5f:e6:fd:79:9e:1b:fe:b3:
c5:ca:b7:8e:e3:75:d9:09:33:c7:f0:54:36:15:30:50:5b:1f:
95:c9:50:a8:6f:4c:ee:e4:24:5d:5b:06:a3:03:94:c7:9a:0e:
ac:f2:86:66:e6:77:85:03:f0:0b:ca:a0:bc:87:0c:48:ec:a6:
24:6c:f7:78:0f:0f:b8:9b:44:14:47:31:dd:c4:56:64:7f:f9:
ab:75:1f:49:eb:78:8f:cb:9f:d8:e7:2f:25:8a:08:f4:9b:43:
94:12:3a:26:04:2f:3c:cb:fc:ef:2f:72:2c:3b:e1:4c:bd:af:
48:61:ba:65:02:a3:8e:ba:6c:fb:a6:06:bf:72:ad:18:a8:75:
7e:6c:57:e6:98:72:fa:41:fa:fd:fc:86:f9:72:7c:35:5e:99:
fb:d4:2f:b6:69:b0:5d:c3:af:41:a5:f5:c8:79:f1:0b:99:9c:
ce:65:7c:fa:80:94:03:cb:fe:ca:8b:f6:8d:0d:8a:1e:28:93:
c4:54:48:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:45:16 2026 by rpki-client